commit d37e0c4639c66f7bb4b6e2c039c96304b7536185
author David Horstmann <david.horstmann@arm.com> Thu Jan 16 16:24:35 2025 +0000
committer David Horstmann <david.horstmann@arm.com> Wed Jan 22 11:36:15 2025 +0000
tree acb1950b34740098e69f3dc41a2282dd5658fca6
parent 189bf030566c74a19abf6c06027992f8a36ff4a7

Add constant-flow testing for PKCS7 padding

Signed-off-by: David Horstmann <david.horstmann@arm.com>

library/cipher.c

diff --git a/library/cipher.c b/library/cipher.c
index 7f4c121..5e14e1e 100644
--- a/library/cipher.c
+++ b/library/cipher.c
@@ -14,6 +14,7 @@
 #if defined(MBEDTLS_CIPHER_C)
 
 #include "mbedtls/cipher.h"
+#include "cipher_invasive.h"
 #include "cipher_wrap.h"
 #include "mbedtls/platform_util.h"
 #include "mbedtls/error.h"
@@ -838,8 +839,9 @@
     }
 }
 
-static int get_pkcs_padding(unsigned char *input, size_t input_len,
-                            size_t *data_len)
+MBEDTLS_STATIC_TESTABLE int get_pkcs_padding(unsigned char *input,
+                                             size_t input_len,
+                                             size_t *data_len)
 {
     size_t i, pad_idx;
     unsigned char padding_len;